update README
password confirm